What do the IIS Authentication settings need to be to get the initial installation of DNN running? Is it only the IIS AppPool\[MyApp] that needs disk access to the folders?

Now that I have gone through and manually configured SQL Server (avoiding assumptions of using SQL Express), I'm encountering a DNN Error:

"System.UnauthorizedAccessException: Access to the path 'C:\[website]\test.example.com\DNN\Install\DotNetNuke.install.config.resources' is denied."

Plus, no styles are being applied. Using Firefox, if I View Source and follow the links to the stylesheets, I get error pages stating permission issues. If I enable Basic authentication and put in my admin account for the server, the styles load, though I still get the DNN Error.

All pages and directories that I've checked have the IIS AppPool\[MyApp] with modify permissions.

. . . . .

Also, if for nothing other than posterity, could someone write out a complete hierarchical listing of all the permissions and what they should be for DNN to work initially?

e.g. Machine.Config: { [whatever this might need to be, if involved] }; IIS Site Authentication: { Anonymous = enabled, ASP.NET Impersonation = enabled, Basic = disabled, etc... }; disk permissions for website directory: { IIS 6? "Network Service" = modify, IIS7+? "IIS AppPool\AppPoolName" = modify, etc... }; SQL Server configuration: { local SQL Server Express? default DNN config, SQL Server 2005-2014? [link to appropriate server connection string examples] replacing user id and password appropriately, etc... }; ... what else?